Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/4UQOn1OKZOZSubWDUY-5e5tQCCA.roa
File: 4UQOn1OKZOZSubWDUY-5e5tQCCA.roa (raw, json)
Hash identifier: GRqmNGNPwq4jVkyPcGd24TZ8fMPdWMFjbcGVjWZdnCY=
Subject key identifier: E1:44:0E:9F:53:8A:64:E6:52:B9:B5:83:51:8F:B9:7B:9B:50:08:20
Certificate issuer: /CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Certificate serial: 326CFD3B
Authority key identifier: 6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/4UQOn1OKZOZSubWDUY-5e5tQCCA.roa
Signing time: Sat 01 Jan 2022 10:54:43 +0000
ROA not before: Sat 01 Jan 2022 10:54:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57704
IP address blocks: 185.132.248.0/22 maxlen: 24
5.133.24.0/21 maxlen: 24
2a09:9900::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 846003515 (0x326cfd3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Validity
Not Before: Jan 1 10:54:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1440e9f538a64e652b9b583518fb97b9b500820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:63:f2:16:fc:19:2b:1e:d5:f3:e5:d5:d9:e4:
a9:41:81:b3:df:47:2a:20:7d:a7:32:58:f2:96:89:
90:b4:86:42:db:ca:58:42:20:c4:4e:57:a3:53:31:
81:c7:41:c6:0d:9b:16:42:48:4a:7e:74:fe:97:91:
d9:bf:91:c7:f2:b2:6f:77:1b:35:81:18:5a:21:0d:
5a:1f:fe:40:c3:a3:55:ef:2b:92:6a:6a:d5:3b:f4:
a0:20:8d:78:df:b7:f7:5d:65:d0:cf:ca:77:d8:78:
dc:0d:10:cf:80:69:7a:55:69:f6:8e:27:ee:df:ed:
15:81:0d:4d:a7:f0:65:4a:af:09:ea:83:46:d0:4b:
32:2a:e0:12:95:07:e6:dc:94:02:79:ab:03:4f:b8:
88:31:ed:a1:d7:a6:7d:92:2e:d2:90:ae:1a:26:25:
cd:cd:49:1b:85:2c:bb:0d:1f:ab:00:2c:a9:a6:78:
9f:56:53:94:33:6f:25:3b:26:20:dc:42:70:3e:e1:
db:d0:40:91:7d:6e:87:0c:5d:93:ec:96:73:04:60:
22:95:e9:4b:b7:3d:1f:85:d2:f1:cf:f7:16:d9:ca:
6a:94:86:1b:00:28:b8:22:d7:0f:b1:11:6a:d2:22:
6f:72:79:b0:6c:29:64:d3:be:ae:4a:60:b4:71:34:
e7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:44:0E:9F:53:8A:64:E6:52:B9:B5:83:51:8F:B9:7B:9B:50:08:20
X509v3 Authority Key Identifier:
keyid:6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/4UQOn1OKZOZSubWDUY-5e5tQCCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.24.0/21
185.132.248.0/22
IPv6:
2a09:9900::/32
Signature Algorithm: sha256WithRSAEncryption
49:f3:6e:77:7a:3b:3a:22:a4:6d:13:31:b4:1c:37:87:96:36:
48:7c:14:a2:be:4f:e1:85:2f:a3:3b:a1:73:b6:d1:17:c6:c6:
e0:64:12:97:09:f2:85:6a:3d:cd:9c:d5:ca:d6:6d:d5:79:59:
af:e4:94:69:d9:f6:af:64:4a:48:e9:01:a0:91:31:82:6a:46:
6a:64:6a:2a:bf:03:c3:6c:bf:cd:cc:5d:5c:fd:7a:89:35:31:
8f:b4:2f:17:50:de:fc:fc:6d:e4:b9:3e:77:4d:31:12:34:b2:
4a:a7:f3:5e:2b:7f:9e:fc:b6:e9:2e:ae:fc:1f:11:dc:88:8b:
fb:09:79:b1:93:ec:72:a9:d5:2a:f9:43:af:d9:f1:12:23:19:
52:70:e8:52:75:7a:f0:14:46:74:f4:b6:5e:e2:58:28:34:89:
ae:f3:02:fe:91:88:09:ed:cd:57:1b:1a:de:c0:7b:6c:10:c3:
04:cf:40:0d:96:7e:1d:f7:04:40:7d:79:6a:e5:b8:34:99:1e:
f5:50:8f:d0:eb:88:e4:c6:86:9b:0b:15:78:d6:2c:6b:bb:69:
6a:99:15:4f:99:98:43:ec:b1:a4:83:ed:73:67:46:75:97:ea:
0c:fd:00:ca:4e:a5:8d:ff:6c:bb:72:b5:97:df:3a:19:67:c8:
db:a1:b9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:00 2023 by rpki-client on console-ams.rpki-client.org